Rob Brewer
Chief Information Security Officer
Senior Management

More about Rob Brewer
As Chief Information Security Officer at CloudTech24, I lead security strategy, governance and operational delivery. I help our clients’ executive teams make informed decisions about cyber risk. My role involves understanding how a customer’s business actually works, where the real risks sit, and what it takes to reduce them in a way that lasts, using existing capabilities wherever possible.
My background spans hands-on technical delivery and board-level advisory to clients across fintech, financial services, legal and other regulated industries. I also own our ISO 27001 programme and the ISMS behind it. As AI moves into everyday business use, I also ensure that our usage of AI aligns to best practise through governance and policy, and advise leadership and customers on safe adoption, aligning toward emerging standards such as ISO 42001 and the EU AI Act.
Outside of work, I’m a proud dad to two brilliant daughters and a lifelong LEGO enthusiast – if we’ve had a video call, chances are you’ve seen a few of my builds in the background. I’m also a passionate gamer and PC builder, a hobby I picked up in the early 2000s with my dad, who first sparked my interest in computers. Fun fact: back in the day, I was Europe’s #1 ranked Battlefield 1942 player – proof that my competitive streak goes way back!
Blogs by Rob Brewer

Optimise Security with Our Guide to Microsoft 365 Policy Management
What is Microsoft 365 Policy Management – and why might modern businesses want to explore it? In this guest blog from Microsoft tenant management experts inforcer, Graham Morrison, M365 Solutions Architect, explores how a little policy knowledge goes a long way – and how your Microsoft partner can help take your Microsoft 365 Business Premium…
Read more

Google Workspace vs Microsoft 365
The trend of saving company files locally is on the decline. People enjoy the independence, remote access to data, and often lower costs that come with cloud applications and managed cloud services. These advantages are key when considering Google Workspace versus Microsoft 365, the two leading productivity suites in the cloud. With a solid 50%…
Read more

Could Your Employees Spot A Sophisticated Phish? This One Did.
This blog was authored by one of our Cyber Operations Analysts, Yash. Phishing attacks remain one of the most common and dangerous cybersecurity threats today. They rely on deception, enticing recipients to click on malicious links or download harmful attachments. However, the situation becomes even more complex when the phishing email appears to come from…
Read more

Phishing 101: 7 ways to spot a phishing email
Phishing attacks are on the rise. In 2024, the number of phishing scams increased by 34%. This figure represents millions of malicious emails zipping across the web daily. It’s not all doom and gloom, though. Armed with enough information, it is possible to spot a phishing email before any damage is done. Here’s how to…
Read more

Announcing Our New Advance Domain Security Service
On Monday 7th October 2024, CloudTech24 are pleased to announce the release of our new Advanced Domain Security service, in partnership with PowerDMARC. Our new service helps customers secure their domain and protect them from security threats such as email spoofing and failed mail delivery. Advanced Domain Security; Monitored and Managed By Our Security Team…
Read more

How Does MDR Work?
Managed Detection and Response (MDR) is used by companies to look for and respond to potential compromise in an environment. There is no single element that forms MDR; it is a combination of cyber security policies and practice that, when used effectively, mitigates the effect of cyber-attacks. In this blog, we look at how MDR…
Read more

Phishing vs blagging: What’s the difference?
Phishing and blagging are both social engineering techniques designed to steal a person’s information and extort money. Would you recognise the signs if you were at the end of a blagging or phishing attempt? This blog post explores the differences between blagging and phishing – the signs to look for and how to respond. What…
Read more

The 5 Common Mistakes Businesses Make With Zero Trust Security
Zero Trust security is rapidly changing the cybersecurity landscape. Zero Trust security protocol shifts controls from traditional perimeter-based security models. Every connection to your business assets is continuously verified before access to resources is granted. So effective is it that 56% of global organisations say adopting Zero Trust is a “Top” or “High” priority. A…
Read more

Types of Penetration Testing: Black vs White vs Grey Box Testing
What Is Pen Testing? Penetration testing (or pen testing) is an engagement where an offensive security specialist (often from a pentration testing company or MSSP) is authorised to perform an attack on an organisation’s network and/or infrastructure. A penetration test is conducted within a scope and terms of engagement document agreed with the client in…
Read more

The Benefits of a Managed Firewall Service
Good cyber security is essential to any business. Without it, your business holds the key to potential profits for cyber criminals. Firewalls are one of the best forms of defense against external threats. When optimised, a firewall can be the difference between business as normal and a serious cyber incident that could leave you and…
Read more

What is two-factor authentication, and why is it important?
Only one in ten people with a Google account use two-factor authentication to protect their data online, yet it could reduce the chances of their account being hacked by 50%.It might seem like an inconvenience, but this additional layer of security is necessary to stop hackers from accessing your online accounts. In this blog, we…
Read more

The Significance of IT Maintenance: Its Role and Importance
IT maintenance is key for three reasons; firstly, IT maintenance helps equipment such as laptops and desktops perform to the best of their ability. Any flaws can be corrected by routine and regular IT maintenance. It also helps with meeting compliance and data protection standards where necessary. Secondly, effective maintenance helps improve your cyber security.…
Read more
